This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916C4A5/BF50E862A23411EF978C8D6DC4F9AE02/z-BxqXL9eKZ_bT7VamGENAqz46Y.mft
File:                     z-BxqXL9eKZ_bT7VamGENAqz46Y.mft (raw, json)
Hash identifier:          NNltAG+wOK3gG1itlkIksyCkjlH/wJhqO1GXDl2+9l8=
Subject key identifier:   8E:46:39:1A:ED:B6:19:C1:44:BE:34:53:5C:57:A2:47:5D:12:47:E2
Authority key identifier: CF:E0:71:A9:72:FD:78:A6:7F:6D:3E:D5:6A:61:84:34:0A:B3:E3:A6
Certificate issuer:       /CN=A916C4A5/serialNumber=CFE071A972FD78A67F6D3ED56A6184340AB3E3A6
Certificate serial:       DB
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/z-BxqXL9eKZ_bT7VamGENAqz46Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916C4A5/BF50E862A23411EF978C8D6DC4F9AE02/z-BxqXL9eKZ_bT7VamGENAqz46Y.mft
Manifest number:          D9
Signing time:             Wed 07 Jan 2026 04:47:31 +0000
Manifest this update:     Wed 07 Jan 2026 04:47:31 +0000
Manifest next update:     Wed 14 Jan 2026 04:47:31 +0000
Files and hashes:         1: z-BxqXL9eKZ_bT7VamGENAqz46Y.crl (hash: DVOcf26e9jsj1hIw1JjgaJ27E64RinHFcjYyqu/iGI0=)
                          2: FB01C0A4A24B11EFA8802F31C4F9AE02.roa (hash: c/aPIx7sIlMm9hEs7EP/H/t3hc0Qsr+nc2nekVdkKmU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916C4A5/BF50E862A23411EF978C8D6DC4F9AE02/z-BxqXL9eKZ_bT7VamGENAqz46Y.crl
                          rsync://rpki.apnic.net/member_repository/A916C4A5/BF50E862A23411EF978C8D6DC4F9AE02/z-BxqXL9eKZ_bT7VamGENAqz46Y.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/z-BxqXL9eKZ_bT7VamGENAqz46Y.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 14 Jan 2026 04:47:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 219 (0xdb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916C4A5, serialNumber=CFE071A972FD78A67F6D3ED56A6184340AB3E3A6
        Validity
            Not Before: Jan  7 04:47:31 2026 GMT
            Not After : Jan 14 04:47:31 2026 GMT
        Subject: CN=695de563-0b84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:63:d6:5d:10:51:20:0d:4e:c8:9c:e0:59:0f:
                    7b:c2:1e:0e:4f:3f:cd:d5:b5:a7:4b:83:5c:4f:32:
                    25:0b:94:60:0c:64:ab:85:ea:86:3b:22:fa:63:7c:
                    d8:2f:b5:8c:8c:29:92:b2:89:c6:46:0f:35:42:e6:
                    6c:e4:40:1e:31:6b:f8:e2:f9:05:96:12:fc:ce:84:
                    f1:ed:2a:1d:16:be:b9:e0:81:dc:d7:8e:3b:35:52:
                    ad:3a:6a:3f:84:36:4d:f7:1f:ce:73:a9:12:90:76:
                    c7:41:be:26:5d:9a:e4:4c:e7:c9:9e:63:07:0e:00:
                    9c:bd:52:35:89:a4:54:c7:b4:6e:14:86:11:02:db:
                    72:1e:ab:8e:0a:6b:1f:83:ea:be:bb:e9:87:e8:40:
                    94:c5:aa:68:7e:b7:16:46:c7:89:16:71:89:9a:bc:
                    b0:8b:9a:e0:a5:35:5f:61:9f:9e:de:49:37:5f:26:
                    c9:a1:40:0f:87:65:62:e1:44:09:b0:fe:22:ae:4e:
                    7f:f0:68:b0:ee:0c:af:dd:01:08:fd:84:00:69:4e:
                    9b:49:4e:d8:c2:fd:ab:fd:99:17:e3:00:31:53:be:
                    e2:80:3f:d1:fd:7e:f4:ac:ec:0d:cc:73:8a:5f:c0:
                    eb:77:ef:da:f9:05:d2:99:2e:4c:bc:e4:1b:b1:b4:
                    ad:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:46:39:1A:ED:B6:19:C1:44:BE:34:53:5C:57:A2:47:5D:12:47:E2
            X509v3 Authority Key Identifier:
                keyid:CF:E0:71:A9:72:FD:78:A6:7F:6D:3E:D5:6A:61:84:34:0A:B3:E3:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916C4A5/BF50E862A23411EF978C8D6DC4F9AE02/z-BxqXL9eKZ_bT7VamGENAqz46Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/z-BxqXL9eKZ_bT7VamGENAqz46Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C4A5/BF50E862A23411EF978C8D6DC4F9AE02/z-BxqXL9eKZ_bT7VamGENAqz46Y.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c5:b5:6a:68:b0:e9:9b:d8:32:bc:a7:5b:eb:d1:8f:51:8c:2a:
         f9:15:5d:e1:cc:54:52:c9:5d:7b:56:42:b2:19:e9:35:08:03:
         62:53:2b:3c:b7:9c:aa:2f:3d:f1:16:f7:20:1a:8c:77:93:7a:
         4b:80:79:0f:b2:4d:85:4c:89:ea:df:75:77:60:3b:6b:2e:29:
         32:66:08:40:b7:24:36:4c:71:bf:aa:b2:c7:08:70:8c:62:a3:
         c0:61:0b:5c:bb:39:74:51:06:24:85:8b:c1:cb:e6:47:8f:26:
         ed:61:83:aa:b1:08:cc:3f:98:8e:35:75:33:90:b3:08:52:63:
         a9:01:d4:41:31:bc:ec:fe:08:0a:13:92:03:ae:a9:bb:0e:f3:
         f9:4d:16:56:b2:db:23:4b:16:63:f8:63:d7:65:79:43:05:1e:
         27:b7:cb:53:46:4d:80:88:8e:e3:d6:ea:c8:f0:cc:13:69:81:
         30:54:44:72:6e:a2:4d:2f:9e:87:8a:eb:6c:6e:c6:5e:2a:be:
         74:8a:e3:12:c2:7a:dd:9a:69:32:c9:1c:65:24:24:24:9e:15:
         9a:7f:1e:f5:a7:e6:fe:7d:88:3e:43:37:a2:93:b4:a7:7a:25:
         47:79:8c:e0:48:39:1c:7e:b0:c8:a4:76:78:3d:80:aa:e2:f8:
         a7:c1:75:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 7 07:19:01 2026 by rpki-client